Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
6ac5a96fa2677fb7f602d1269ebba484_JaffaCakes118
-
Size
60KB
-
Sample
240724-jhx6raxhlg
-
MD5
6ac5a96fa2677fb7f602d1269ebba484
-
SHA1
7a8d0123ea6a9adbba42c6f007c8e4a4a761b881
-
SHA256
43531d3b8de7c9a3ad040bd28df53cb27d6c3211d339b98f5262f0d2eb55526b
-
SHA512
fdcae3a1705950d6e0be4fbc1b24d761d4ac4e2f90774b58fb5670d5cfd45439ed281d4667030e66aa13d41c3888b4f8235001b7bd0cbf43e5abe903367eb3e6
-
SSDEEP
1536:LJiYU3BupCdtWMrd4IJfzc5TOtnVxhxMU:LJil3BaCdtWxSLMTOtVxgU
Behavioral task
behavioral1
Sample
6ac5a96fa2677fb7f602d1269ebba484_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6ac5a96fa2677fb7f602d1269ebba484_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
6ac5a96fa2677fb7f602d1269ebba484_JaffaCakes118
-
Size
60KB
-
MD5
6ac5a96fa2677fb7f602d1269ebba484
-
SHA1
7a8d0123ea6a9adbba42c6f007c8e4a4a761b881
-
SHA256
43531d3b8de7c9a3ad040bd28df53cb27d6c3211d339b98f5262f0d2eb55526b
-
SHA512
fdcae3a1705950d6e0be4fbc1b24d761d4ac4e2f90774b58fb5670d5cfd45439ed281d4667030e66aa13d41c3888b4f8235001b7bd0cbf43e5abe903367eb3e6
-
SSDEEP
1536:LJiYU3BupCdtWMrd4IJfzc5TOtnVxhxMU:LJil3BaCdtWxSLMTOtVxgU
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-